chore: apply npm audit fix to package-lock transitive dependencies - #132

This PR applies npm audit fix to remediate vulnerable dependency resolutions without changing the declared package manifest. The update is scoped to lockfile-level transitive dependency versions.

• Scope

  • Updated package-lock.json entries produced by npm audit fix
  • No changes to package.json dependency declarations

• Dependency resolution updates

  • Refreshed transitive packages to patched releases (examples include brace-expansion, @humanfs/core, @humanfs/node, js-yaml)
  • Kept dependency graph intent intact while moving vulnerable ranges to resolved safe versions

• Representative lockfile delta

  "node_modules/js-yaml": {
    "version": "4.3.2",
    "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.3.2.tgz"
  }